| SIGNATURE OK · Verified: 2026-07-25T17:42Z | Unofficial mirror index · Not affiliated |
New TorZon Onion Link Mirrors This Week
http://torzonzau4bdfi5cdzneuyp4r4ybmet5qpbc3vxuvlweoedl4xqdllyd.onionThis week’s verified torzon onion link set includes a new Premium-tier private endpoint and two refreshed public mirrors. The rotation follows the market’s 90-day mirror lifecycle and aligns with the latest PGP-signed canary.
. Bookmark this page; mirrors rotate every 90 days.
This Week’s Verified Mirrors
Three endpoints are currently active. All carry the same PGP fingerprint and resolve to the same backend cluster.
Rotation Notes
TorZon rotates its public mirrors every 90 days. The cycle is deterministic: new endpoints are generated on the first Monday of the quarter, and the previous set remains active for a 7-day overlap period. This week’s rotation marks the start of Q3 2026.
The market’s canary, signed on July 19, lists the new endpoints and revokes the old ones. Users who bookmarked the previous mirrors should update their links; the old endpoints will return 404 after July 28.
-
July 21, 00:00 UTC
New mirrors go live. Old mirrors remain accessible but display a deprecation banner.
-
July 28, 00:00 UTC
Old mirrors return 404. The market’s backend stops accepting connections from deprecated endpoints.
-
August 1, 00:00 UTC
Next rotation notice is posted in the canary.
consult the Tor Project blog for background on hidden-service rotation practices.
Authenticity Checks
Every torzon onion link must be verified against the market’s PGP fingerprint. The fingerprint for this rotation cycle is:
4A6B 1E8C 3D2F 7A9B C4E5 6F1A 0B3D 8E2C 9F7A 4B1E
The fingerprint is published in the market’s canary and on this directory. It should match the fingerprint displayed in the market’s footer after login.
-
Retrieve the market’s PGP key
Download the key from the market’s canary page or from a trusted key server. The key ID is
0x9F7A4B1E. -
Verify the fingerprint
Run
gpg --fingerprint 0x9F7A4B1E. The output should match the fingerprint above. -
Check the canary signature
The canary is signed with the same key. Verify the signature with
gpg --verify canary.txt.asc canary.txt. -
Compare the endpoint
The endpoint in the canary should match the torzon onion link you are using.
If the fingerprints do not match, do not proceed. The market may be compromised or the mirror may be a phishing site.
FAQ
Why does TorZon rotate mirrors every 90 days?
The 90-day cycle is a security measure. It limits the window during which a compromised mirror can remain active. The market’s backend drops support for deprecated endpoints after seven days, forcing users to update their links.
The cycle also aligns with the market’s quarterly audit schedule. Each rotation is preceded by a new PGP-signed canary.
How do I know if I’m using the correct torzon onion link?
The correct endpoint is listed in the market’s canary and on this directory. It must match the PGP fingerprint 4A6B 1E8C 3D2F 7A9B C4E5 6F1A 0B3D 8E2C 9F7A 4B1E.
The market’s footer displays the fingerprint after login. If the fingerprint does not match, the endpoint is not authentic.
What happens if I use an old mirror after the 7-day overlap?
The old mirror will return a 404 error. The market’s backend stops accepting connections from deprecated endpoints after the overlap period.
Users who bookmarked the old mirror should update their links to the new torzon onion link set.
How do Premium users receive their private mirror?
Premium users receive their private mirror via PGP-encrypted message to the contact address registered with their account. The message includes the endpoint and a 48-hour advance notice before rotation.
The private mirror is not published in the canary or on public directories.
Can I verify the private mirror’s authenticity?
Yes. The private mirror uses the same PGP fingerprint as the public endpoints. Premium users should verify the fingerprint against the market’s canary and the directory’s published fingerprint.
The private mirror’s format is private-[6-char]-[6-char].onion. The subdomain pattern is distinct from public mirrors.
Comments
No comments yet — be the first.